Lucene search

IbmCVE-2014-0895

HistoryMar 16, 2014 - 2:06 p.m.

CVE-2014-0895

2014-03-1614:06:45

CWE-119

ibm

web.nvd.nist.gov

cve-2014-0895

buffer overflow

vsflex8l activex control

ibm spss samplepower 3.0.1

remote code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.834

Percentile

98.5%

JSON

Buffer overflow in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF02 allows remote attackers to execute arbitrary code via a crafted ComboList property value.

Affected configurations

Nvd

Node

ibmspss_samplepowerMatch3.0.1.0

VendorProductVersionCPE
ibmspss_samplepower3.0.1.0cpe:2.3:a:ibm:spss_samplepower:3.0.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	spss_samplepower	3.0.1.0	cpe:2.3:a:ibm:spss_samplepower:3.0.1.0:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg1PI09800

www-01.ibm.com/support/docview.wss?uid=swg21666790

www.solarwinds.com/documentation/orion/docs/releasenotes/releasenotes.htm

exchange.xforce.ibmcloud.com/vulnerabilities/91314

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.834

Percentile

98.5%

JSON

Related for CVE-2014-0895